13538 matches found
Solaris rwalld Format String - Ver2 (CVE-2002-0573)
A format string vulnerability has been reported in Sun Solaris. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Internet Explorer Keystroke Hijack Information Disclosure - Ver2 (CVE-2006-2900)
An information disclosure vulnerability has been reported in Microsoft Internet Explorer. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...
Cisco Prime Data Center Network Manager processImageSave.jsp Arbitrary File Upload (CVE-2013-5486)
An arbitrary file upload vulnerability exists in Cisco Prime Data Center Network Manager...
Adobe Acrobat and Reader Memory Corruption (APSB14-28: CVE-2014-8445)
A memory corruption vulnerability has been reported in Adobe Acrobat and Reader. The vulnerability is due to the way Adobe Acrobat and Reader parses a malformed PDF file. A remote attacker may exploit this vulnerability by enticing a target user to open a specially crafted PDF file...
Adobe Acrobat and Reader Memory Corruption (APSB13-22: CVE-2013-3352)
A memory corruption vulnerability has been reported in Adobe Reader and Acrobat. The vulnerability is due to incorrect memory buffer allocation while parsing a corrupted PDF file. A remote attacker may exploit this vulnerability by enticing a target user to open a specially crafted PDF file...
Suspicious Javascript Containing Overly Long Strings (CVE-2013-2551)
Javascript may contain variables assigned with overly long strings. This behavior may indicate an exploitation attempt...
ABB MicroSCADA Wserver Multiple Buffer Overflows
Multiple Buffer Overflow vulnerabilities have been reported in the Wserver component of ABB MicroSCADA. The vulnerabilities are due to the copying of user controlled data to stack-based buffers without size verification. A remote attacker can exploit this issue by sending a specially crafted...
Cisco Prime Data Center Network Manager FileUploadServlet Arbitrary File Upload (CVE-2013-5486; CVE-2019-1620)
An arbitrary file upload vulnerability exists in Cisco Prime Data Center Network Manager. The vulnerability is due to lack of authentication and insufficient input validation in the FileUploadServlet when processing HTTP requests. A remote unauthenticated attacker can upload arbitrary files to...
Apache Solr SolrResourceLoader Directory Traversal (CVE-2013-6397)
A directory traversal vulnerability has been reported in Apache Solr. The vulnerability is due to insufficient validation of the resource paths passed to certain Solr REST services. A remote attacker can exploit this vulnerability by sending a specially crafted request to Apache Solr. Successful...
Microsoft IIS Short Filename Information Disclosure
An information disclosure vulnerability has been reported in Microsoft IIS. The vulnerability is due to an error in the way Microsoft IIS handles specially crafted URLs. A remote attacker can leverage this vulnerability to view undisclosed information stored on the server...
Adobe Flash Player Memory Corruption (APSB13-28: CVE-2013-5332)
A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing specially crafted SWF file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted SWF file...
JavaScript Malicious Obfuscation Techniques
Known exploits could potentially bypass security products by using JavaScript obfuscation techniques. Since the exploits are obfuscated they may not be detected by IDS and IPS systems, thus allowing attackers to successfully attack target machines...
Oracle Outside In Microsoft Access 1.x Parser Buffer Overflow (CVE-2013-5791)
A stack buffer overflow vulnerability exists in Oracle Outside-In, a set of libraries used to decode many file formats. The vulnerability is due to an error while processing Microsoft Access 1.x database files .mdb. This vulnerability can be exploited by causing an application that uses the...
Adobe Flash Player Memory Corruption (APSB13-26: CVE-2013-5329)
A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing specially crafted SWF file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted SWF file...
GLPI install.php Remote Command Execution (CVE-2013-5696)
A command execution vulnerability has been reported in GLPI...
PHP OpenSSL Extension X.509 Certificate Memory Corruption (CVE-2013-6420)
A code execution vulnerability has been reported in PHP. The vulnerability is due to a memory corruption error when handling a malicious ASN.1 data type for a timestamp in an X.509 certificate. A remote attacker can exploit this flaw by sending a malicious certificate...
WellinTech KingView ActiveX Control Heap Buffer Overflow Remote Code Execution (CVE-2011-3142)
A stack-based buffer overflow vulnerability has been reported in WellinTech KingView ActiveX control. The vulnerability is due to failure to perform adequate boundary checks on user-supplied input. A remote attacker can exploit this vulnerability by sending via a long second argument to the...
Microsoft Internet Explorer runtimeStyle Handling Memory Corruption (MS13-080; CVE-2013-3882)
A memory corruption vulnerability exists in Microsoft Internet Explorer...
Zabbix Multiple SQL Injections Information Disclosure
An SQL Injection vulnerability has been reported in Zabbix...
Vtiger CRM Authenticated Remote Code Execution
A remote code execution vulnerability has been reported in VTiger CRM...
HP SiteScope issueSiebelCmd SOAP Request Code Execution (CVE-2013-4835)
A command execution vulnerability has been found in HP SiteScope...
Microsoft Access Memory Corruption (MS13-074; CVE-2013-3155)
A remote code execution vulnerability exists in Microsoft Access...
HP Intelligent Management Center SOM euAccountSerivce Authentication Bypass (CVE-2013-4824)
An authentication bypass vulnerability exists in the SOM add-in module of HP Intelligent Management Center...
IBM Platform Symphony SOAP Requests Processing Buffer Overflow (CVE-2013-5387)
A buffer overflow vulnerability has been reported in IBM Platform Symphony...
AdaptWeb Web Application SCADA SQL Injection (CVE-2009-2152)
An SQL Injection vulnerability has been reported in AdaptWeb 0.9.2. The vulnerability is due to improper validation of the CodigoDisciplina parameter passed to the application. A remote unauthenticated attacker could exploit this vulnerability by sending a request with a crafted CodigoDisciplina...
Sybase Multiple Products Directory Traversal (CVE-2011-2474)
A directory traversal vulnerability has been reported in multiple Sybase products...
OpenLDAP rwm Overlay Denial of Service (CVE-2013-4449)
A denial of service vulnerability has been reported in OpenLDAP...
GIMP XWD File Handling Heap Buffer Overflow (CVE-2013-1978)
A heap buffer overflow vulnerability leading to code execution has been reported in GNU Image Manipulation Program GIMP. The vulnerability is due to insufficient validation of certain fields while parsing XWD files. Remote attackers can exploit this vulnerability by enticing the target user to op...
Microsoft Access ACCDB File Memory Corruption (MS13-074; CVE-2013-3157)
A memory corruption vulnerability has been reported in Microsoft Access...
Linux Kernel UDP UFO Large Packet Denial of Service (CVE-2013-4563)
A denial of service vulnerability exists in Linux Kernel with UDP Fragmentation Offload UFO enabled...
Kingsoft Writer Font Names Buffer Overflow (CVE-2013-3934)
A code execution vulnerability has been reported in Kingsoft Writer. The vulnerability is due to an error while handling font names in WPS or Office word files. A remote attacker can exploit this vulnerability by enticing an unsuspecting user to download and process a malicious file with a...
Nodejs js-yaml load() Code Execution (CVE-2013-4660)
A JavaScript Code Execution vulnerability has been reported in Nodejs...
Adobe Acrobat and Reader ToolButton Use After Free (APSB13-15; CVE-2013-3346)
A use after free vulnerability exists in Adobe Acrobat and Reader...
ABB MicroSCADA Wserver Command Execution
A command execution vulnerability has been reported in ABB MicroSCADA. The vulnerability is due to insufficient user authentication by the wserver.exe program when accepting remote execution calls. A remote, unauthenticated attacker can exploit this vulnerability to execute arbitrary commands on...
Microsoft Windows X.509 Certificate Validation Denial of Service (MS13-095; CVE-2013-3869)
A denial of service vulnerability exists in Microsoft Windows. The flaw is due to improper handling of specially crafted X.509 certificates during certificate validation. Successful exploitation could cause a denial of service condition where the web service becomes unresponsive.A remote attacker...
Apache Roller OGNL Injection Remote Code Execution (CVE-2013-4212)
A command execution vulnerability exists in Apache Roller due to a lack of sanitization on OGNL expressions passed to certain methods. This can lead to OGNL injection which can result in remote code execution. A remote unauthenticated attacker could exploit this vulnerability by sending crafted...
ManageEngine DesktopCentral AgentLogUpload Arbitrary File Upload
A code execution vulnerability has been reported in ManageEngine DesktopCentral. The vulnerability is due to lack of authentication and insufficient input validation in the AgentLogUploadServlet.class when processing HTTP requests. A remote unauthenticated attacker can upload arbitrary files to...
ANSSI Improperly Issued Digital Certificates HTTPS Spoofing
Several improperly issued CA certificates could be used in HTTPS spoofing attacks...
PDF Containing Suspicious JavaScript Code
A remote code execution vulnerability has been reported in Adobe Acrobat and Reader when handling PDF files that contain plain JavaScript. A remote attacker can exploit this vulnerability to execute arbitrary code on an affected system via a specially crafted PDF file...
Microsoft Internet Explorer Memory Corruption (MS13-097: CVE-2013-5049)
A remote code execution vulnerability has been reported in Internet Explorer...
Microsoft Internet Explorer Memory Corruption (MS13-097: CVE-2013-5048)
A remote code execution vulnerability has been reported in Internet Explorer...
Microsoft IIS Request Header Buffer Overflow (MS10-065; CVE-2010-2730) - ver 2
A code execution vulnerability exists in Microsoft Internet Information Services IIS...
Multiple OS Malicious Payload Remote Code Execution
A remote code execution vulnerability has been reported in multiple operating systems. A remote attacker can exploit this vulnerability by delivering malicious payload to the target machine. Successful exploitation would allow an attacker to execute code on the target...
Suspicious Javascript Variable Names (CVE-2013-2551)
Javascript may contain overly large amount of abnormal variable names. This behavior may indicate an exploitation attempt...
PDF Containing Suspicious OpenAction
A remote code execution vulnerability has been reported in Adobe Acrobat and Reader when handling PDF files that contain plain JavaScript. A remote attacker can exploit this vulnerability to execute arbitrary code on an affected system via a specially crafted PDF file...
Microsoft Internet Explorer Memory Corruption (MS13-097: CVE-2013-5047)
A remote code execution vulnerability has been reported in Internet Explorer...
Microsoft Scripting Runtime Object Library Use-After-Free Code Execution (MS13-099; CVE-2013-5056)
A remote code execution vulnerability has been reported in the Microsoft Scripting Runtime Object Library...
Microsoft Windows Win32 Shellcode Remote Code Execution
A remote code execution vulnerability has been reported in Microsoft Windows...
Microsoft Internet Explorer Memory Corruption (MS13-097: CVE-2013-5051)
A Remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory. A remote attacker can exploit this issue by enticing a victim to view a specially crafted website with an affecte...
Microsoft Internet Explorer Memory Corruption (MS13-097: CVE-2013-5052)
A Remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory. A remote attacker can exploit this issue by enticing a victim to view a specially crafted website with an affecte...